Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/552db743-b442-4066-8e02-0dcd47471dce/77c967cd-4169-31af-9a0d-c6a057ecc7aa.roa
File:                     77c967cd-4169-31af-9a0d-c6a057ecc7aa.roa (raw, json)
Hash identifier:          pBx6zO6Q3Wl5tvzO68y7gmwYxI3mOQ2Agttet83Ws7w=
Subject key identifier:   92:1B:5D:8C:27:1D:B5:20:97:FC:AD:4E:9A:91:85:3D:DA:5E:F5:E4
Certificate issuer:       /CN=552db743-b442-4066-8e02-0dcd47471dce
Certificate serial:       010D0C9F4328583F515D64B904402FACE95326C0
Authority key identifier: EA:6D:22:E3:E4:B1:9D:DB:DA:CB:F0:E2:93:B0:18:81:E9:3F:99:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/552db743-b442-4066-8e02-0dcd47471dce.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/552db743-b442-4066-8e02-0dcd47471dce/77c967cd-4169-31af-9a0d-c6a057ecc7aa.roa
Signing time:             Wed 21 Oct 2020 14:54:44 +0000
ROA not before:           Wed 21 Oct 2020 14:54:44 +0000
ROA not after:            Tue 24 Dec 2024 05:00:00 +0000
asID:                     0
IP address blocks:        136.175.224.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 17 Oct 2022 14:25:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:51:5d:64:b9:04:40:2f:ac:e9:53:26:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=552db743-b442-4066-8e02-0dcd47471dce
        Validity
            Not Before: Oct 21 14:54:44 2020 GMT
            Not After : Dec 24 05:00:00 2024 GMT
        Subject: CN=7548a9f9-7458-462a-9c32-df7a22a4c578
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:2d:22:c4:4b:66:4d:a0:db:a3:36:ca:e5:c7:
                    c6:3d:77:e0:23:84:d0:3a:f9:88:7f:87:0d:0a:1c:
                    2f:3c:6b:61:5b:6d:07:53:e4:99:24:b5:19:02:35:
                    f6:cc:98:20:f8:6d:0b:79:02:4e:a2:db:60:71:86:
                    8d:a5:4c:a5:9f:1b:ec:25:66:ce:24:38:7d:2a:f6:
                    24:81:dd:2a:89:d1:e3:10:aa:36:34:99:53:9e:99:
                    f1:c6:0a:46:f7:c5:c9:86:81:c6:4c:6a:25:45:8b:
                    91:26:ea:23:8e:84:ad:70:b8:64:d6:dd:02:27:d8:
                    23:0e:d9:b0:a6:cc:0b:f8:bb:e8:4d:12:87:0b:21:
                    8e:d7:e6:fb:09:5e:81:72:81:72:25:1d:49:a4:4c:
                    12:29:a9:9c:eb:dc:39:72:52:89:59:17:31:73:63:
                    f7:3d:da:41:f8:46:c5:1f:45:4c:e0:5c:e9:91:90:
                    bc:78:04:ec:ac:d3:0b:40:98:2c:f8:65:01:13:a4:
                    fa:bf:41:36:be:06:e5:d7:88:7d:73:ca:f8:84:ff:
                    55:35:55:aa:4d:3e:7a:c4:11:09:67:f6:44:be:a1:
                    e4:21:20:56:5b:73:66:fb:50:2c:b2:dc:aa:ce:a4:
                    55:fb:40:90:5f:0c:84:8f:2f:3c:5a:74:de:da:3d:
                    aa:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:1B:5D:8C:27:1D:B5:20:97:FC:AD:4E:9A:91:85:3D:DA:5E:F5:E4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/552db743-b442-4066-8e02-0dcd47471dce/77c967cd-4169-31af-9a0d-c6a057ecc7aa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/552db743-b442-4066-8e02-0dcd47471dce/552db743-b442-4066-8e02-0dcd47471dce.crl

            X509v3 Authority Key Identifier:
                keyid:EA:6D:22:E3:E4:B1:9D:DB:DA:CB:F0:E2:93:B0:18:81:E9:3F:99:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/552db743-b442-4066-8e02-0dcd47471dce.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.175.224.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         71:c5:18:9f:29:10:aa:22:ae:df:6b:32:57:88:bf:16:6e:5f:
         07:5e:ef:4d:78:30:f4:4e:fa:88:4d:e9:3b:6d:74:9a:d5:d6:
         4f:5f:9b:b6:cb:37:3d:5c:80:2e:e7:73:3e:c4:2d:55:4b:ed:
         e0:89:2c:44:4e:19:f1:a6:92:26:6e:2c:b4:c6:a8:c0:c5:72:
         c7:37:6a:df:0a:f7:fe:24:f6:30:16:ff:48:2e:4c:95:91:04:
         e0:3c:98:a8:47:48:f7:f8:80:1b:87:f2:86:25:64:e7:30:ad:
         fa:93:c0:61:8b:b0:8c:61:b6:0d:bc:4c:0e:e0:c0:0b:6f:34:
         e8:9e:4d:97:d7:c0:63:9f:2a:e3:7c:87:07:06:ad:68:0f:dc:
         22:22:2c:13:19:03:94:cd:30:ff:c0:f0:f5:59:9f:22:d9:e9:
         33:a1:07:52:5c:0e:2b:8e:03:ff:6c:c9:3c:e9:9f:24:0d:1b:
         27:8f:53:69:87:72:e1:0b:da:71:b9:ef:9f:36:3c:76:7b:ca:
         62:5f:7e:07:c9:6e:44:1f:8e:3f:0f:a4:f5:b7:4f:4d:c7:fd:
         72:25:93:c2:8d:7d:12:69:e8:4c:98:c0:f2:37:7c:0d:ba:81:
         4c:68:3f:0a:01:3f:19:f7:50:56:f3:c0:58:0a:59:c8:40:f4:
         9e:62:68:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----